socratic-method
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown instructions and documentation. There are no Python scripts, JavaScript files, or shell scripts associated with this skill.
- [SAFE]: The skill's primary purpose is to provide a reasoning protocol for the AI agent to interact with users. It does not request any sensitive permissions, perform network operations, or access the file system.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided prompts to refine them. While this represents a data ingestion surface, the skill has no associated capabilities (no tool access, no code execution) that could be exploited by malicious data.
- Ingestion points: User input prompts (e.g., "I want to add authentication") are processed within the agent's dialogue context.
- Boundary markers: None explicitly defined, but the instructions require the agent to stay within a five-phase questioning protocol.
- Capability inventory: None. The skill does not define or use any tools, scripts, or external APIs.
- Sanitization: Not applicable as no actions are taken beyond text generation.
Audit Metadata